EdDSA, Edwards-curve Digital Signature Algorithm (EdDSA) is a digital signature scheme using a variant of Schnorr signature based on Twisted Edwards curves (source).
Schnorr signatures have a remarkable propert: linearity. This allows multiple parties can collaborate to produce a signature that is valid for the sum of their public keys.
- Does EdDSA provides same security guarantees for when aggregating signatures or deriving a new signatures?
- Can we apply same Blind Signature schema of Schnorr for EdDSA?
- If yes, what are the secure EdDSA aggregation constructions?
I found the following constructions for EdDSA, but I'm not sure if they were analysed enough: